It is also my impression that upgrading will not encrypt existing storage, but reflashing will. My Xperia X has been upgraded many times since encryption was introduced and now runs the latest (last! for this device) available version of SFOS. It is still unencrypted.
(Edit to clarify that last version applies to this specific device)